http://www.h-online.com/security/news/item/EFI-rootkit-for-Macs-demonstrated-1655108.html
EFI rootkit for Macs demonstrated
At the Black Hat hacker conference, Australian security expert Loukas K (aka Snare) has demonstratedPDF a rootkit which is able to insert itself into a Macbook Air's EFI firmware and bypass the FileVault hard drive encryption system. Although the idea of an EFI rootkit is nothing new, this is the first time it has been demonstrated live and the hacker has used a previously unknown method based on a modified Thunderbolt to Ethernet adapter.
New Mac Trojan hints at ties to high-priced commercial hacking toolkit
"Due to the cost, this product is unlikely to be used by your average script kiddie in his parents' basement,"
http://www.smh.com.au/business/world-business/the-one-ring-to-rule-them-all-20111121-1nqx1.html
The licences, which cost €200,000 ($A270,000) a year, are never sold to states that are under European Union or United Nations arms embargoes or to private companies or individuals. But the very fact that RCS exists shows what a team of computer whiz-kids can achieve and the damage they could do if they worked for an enemy of the West.
Forget guns, missiles, tanks and fighter jets; the new arms race is in cyber weapons. The ability to access an enemy's computer system and surreptitiously alter its code - in a world where everything from financial institutions to power grids and government departments are dominated by computers - has, in recent years, taken on huge significance.